security: fix CVE-2022-27191

[aramase]

Signed-off-by: Anish Ramasekar anish.ramasekar@gmail.com

Reason for Change:

• Enables library vuln type for provider-azure image scan results
• fixes CVE-2022-27191

bin/secrets-store-csi-driver-provider-azure (gobinary)
======================================================
Total: 1 (MEDIUM: 0, HIGH: 1, CRITICAL: 0)

+---------------------+------------------+----------+------------------------------------+-----------------------------------+---------------------------------------+
|       LIBRARY       | VULNERABILITY ID | SEVERITY |         INSTALLED VERSION          |           FIXED VERSION           |                 TITLE                 |
+---------------------+------------------+----------+------------------------------------+-----------------------------------+---------------------------------------+
| golang.org/x/crypto | CVE-2022-27191   | HIGH     | v0.0.0-20211215153901-e495a2d5b3d3 | 0.0.0-20220315160706-3147a52a75dd | golang: crash in a                    |
|                     |                  |          |                                    |                                   | golang.org/x/crypto/ssh server        |
|                     |                  |          |                                    |                                   | -->avd.aquasec.com/nvd/cve-2022-27191 |
+---------------------+------------------+----------+------------------------------------+-----------------------------------+---------------------------------------+

Requirements

• squashed commits
• included documentation
• added unit tests and e2e tests (if applicable).

Issue Fixed:

Does this change contain code from or inspired by another project?

• Yes
• No

If "Yes," did you notify that project's maintainers and provide attribution?

Special Notes for Reviewers:

[aramase]

297e88f enables testing vulnerability in the go binary and 253fd78 fixes CVE-2022-27191